1. Controller
Belto Inc., trading as BELTO, a Delaware C corporation, EIN 42-2177064, registered at 1221 College Park Drive, Suite 116, Dover, DE 19904, Kent County, United States. BELTO operates fully online; this is a corporate registration address, not a client-facing office. Contact: support@belto.world.
2. What we collect and why
Website enquiries. Your name, email, organisation, chosen topic and message. We use this to answer you. Basis: our legitimate interest in responding to enquiries, or steps taken at your request before a contract.
Project requests. Everything you put into the request form, including budget, deadlines, technical context and any documents you attach. We use it to assess and quote the work. Basis: steps taken before a contract.
Client portal. Your account details, organisation membership, requests, proposals, invoices, project activity, messages and uploaded documents. Portal files are held in private storage and reached only through short-lived signed links issued to your signed-in account. Basis: performance of the contract.
Academy. Your account, entitlements, lesson progress, notes and bookmarks, and a record of which version of a template you downloaded. The download record exists so we can tell you which edition you received; it is not used for marketing. Basis: performance of the contract and our legitimate interest in an auditable document trail.
Video viewing. If and when lessons carry recordings, the video provider will process playback data such as position and device type so playback works and progress is saved. No video provider is connected yet. When one is, it will be named here before any recording is published.
Recruitment. Name, contact details, location, education, work history, links you supply, your cover letter and your CV. We use it to assess your application. Basis: steps taken before a contract of employment, and our legitimate interest in running a hiring process. CVs are stored in private storage accessible only to the hiring team.
Newsletter and marketing. Your email address and the categories you chose. You can unsubscribe from any issue. Basis: consent.
Analytics. We describe our analytics in the cookie notice. Non-essential analytics run only where you have consented.
Payments. Our payment provider processes card details. We never see or store your full card number. We keep the invoice, the amount, the status and the provider's reference.
3. Who we share with
Service providers who host, store, send email, process payments and, in future, serve video. Each acts on our instructions. We do not sell personal data. We do not publish client material without written approval.
4. International transfers
Our providers may process data outside your country, including in the United States. Where data is transferred out of the UK or the European Economic Area, we rely on the European Commission Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) in our agreements with those providers, together with the provider's own technical and organisational safeguards.
5. How long we keep it
Enquiries: up to 24 months. Client engagement records: for the life of the engagement and then as long as we must for tax, accounting and limitation periods. Unsuccessful applications: 12 months from the hiring decision, unless you ask us to delete them sooner. Newsletter: until you unsubscribe.
6. Your rights
Depending on where you live, you may ask for a copy of your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent. Write to support@belto.world. You may also complain to your data protection authority.
7. Children
Our services are not directed to children.
8. Security
Access is role-based and enforced at the database level, not only hidden in the interface. Private files are never publicly addressable. Privileged actions are recorded in an audit log.
9. Changes
This policy is versioned; the version and date are shown at the top of the page.